Comment by mikesoylu

This is to pass cache keys through the client to improve token usage. Obviously not a distillation defense as you can simply bypass this kind of thing trivially by using a different subtask tool.